About Rixate
Rixate publishes tech and security news, written from official sources. Vulnerabilities come first: which flaws matter, whether attackers are already using them, and what you should do about it. Alongside them we cover AI, software updates, gadgets, gaming, Big Tech and data breaches.
Who runs Rixate
Rixate is an independent site run from the Netherlands. The articles are not written by a newsroom: they are produced automatically from official sources and checked by software. The site owner oversees the system and can take any article offline.
Editorial principles
- Official sources only: facts come from governments, vendors and the companies themselves. We never use news sites as a source.
- No copying: every article is written in our own words and checked for too much overlap with its source.
- Claims are attributed: in tech articles, what is stated is the company's own claim, and every article links to its sources.
- AI-written, checked by software: an AI model writes, automated checks test facts, severity and sources before publication.
- We correct mistakes quickly and visibly, see our corrections policy.
How we work
All articles are written by an AI model (Claude, by Anthropic) from official sources. Software then checks each article against the source data before it is published.
Articles may be published without human review. The Dutch edition is translated from the English article by an AI model, and the translation is checked by software too. Every article links to the official sources it is based on, so you can verify it yourself.
We also watch what well-known news sites cover, only to judge which announcements matter. We never copy or link their articles, and nothing in our articles comes from them.
Articles can still contain mistakes, and a flaw can change after we publish: patches appear, details get corrected. When important facts change, the article is updated and says so.
Our sources
Vulnerabilities: the CISA Known Exploited Vulnerabilities catalog (KEV), the National Vulnerability Database (NVD), FIRST EPSS, the Microsoft Security Response Center (MSRC) and security advisories from vendors and agencies such as Cisco, Fortinet, NCSC-NL and GitHub Security Advisories.
All other topics use the companies' own newsrooms and blogs of these sources:
AI
- Google AI blog
- OpenAI News
- NVIDIA Newsroom
Software updates
- Windows Blog
- AWS What's New
- The Mozilla Blog
- Chrome Releases
- Android Developers Blog
- The GitHub Blog
Gadgets
- Apple Newsroom
- Samsung Newsroom (global)
- AMD Press Releases
- Qualcomm Press Releases
Big Tech
- Google, The Keyword
- Microsoft Official Blog
- Microsoft Source
- Meta Newsroom
- Amazon News
Gaming
- Xbox Wire
- PlayStation Blog
- Steam News
Breaches
- SEC EDGAR (8-K, Item 1.05)
- Statements by the affected companies
How severity and scores work
A vulnerability's severity follows the CVSS base score in the NVD: low below 4.0, medium 4.0 to 6.9, high 7.0 to 8.9 and critical from 9.0. “Exploited” means CISA lists the flaw in its KEV catalog or Microsoft reports exploitation. The EPSS value from FIRST estimates the chance that a flaw is exploited in the next 30 days. Which vulnerabilities get an article is decided by an internal newsworthiness score based on exploitation, severity, EPSS, vendor advisories and whether the vendor is on our watchlist; we do not show that score as a rating.
Contact and reporting errors
Found something wrong? Use the “Report an error” link on the article: describe what is wrong and, if you like, leave an email address for a reply. You can also write to contact@rixate.com and name the article.
Advertising
Ads, when shown, are always labelled as such and have no influence on what we publish.